Docker學習（六） Mongodb安裝

時間 2019-11-07

標籤 docker 學習 mongodb 安裝欄目 Docker 简体版

原文原文鏈接

普通安裝：html

https://www.mongodb.com/download-center/communitynode

下載：wget https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel70-4.0.10.tgzlinux

tar -zxvf mongodb-linux-x86_64-debian92-4.0.3.tgz -C /opt/
mv mongodb-linux-x86_64-debian92-4.0.10 /opt/mongdb4010git

mkdir logs
cd logs/
touch mongo.loggithub

vi /etc/profile
PATH=$PATH:/opt/mongodb4010/binredis

source /etc/profilemongodb

直接運行：mongod
出現：exception in initAndListen: NonExistentPath: Data directory /data/db not found., terminatingdocker

mkdir /opt/mongodb4010/data/db/ -pshell

mongod --dbpath '/opt/mongodb4010/data/db'數據庫

使用客戶端鏈接，輸入mongo

$ mongo

mongodb集羣可參考以下：

http://www.lanceyan.com/tech/mongodb/mongodb_cluster_1.html

http://www.lanceyan.com/tech/mongodb/mongodb_repset1.html

http://www.lanceyan.com/tech/mongodb_repset2.html

http://www.lanceyan.com/tech/arch/mongodb_shard1.html

Docker安裝

1、用命令安裝

一、環境已安裝好docker，網絡配置好了，啓動docker

[root@localhost ~]# systemctl start docker.service

[root@localhost ~]# mkdir -p ~/mongo ~/mongo/db

[root@localhost ~]# cd mongo

三、安裝mongodb

[root@localhost mongo]# docker pull mongo
[root@localhost ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
redis 4.0.11 43da2e0979d8 2 days ago 83.44 MB
mongo latest a41c82c0998a 8 days ago 380.2 MB

四、運行容器，不加權限

[root@localhost mongo]# docker run --name mongodb-server0 -p 27017:27017 -v $PWD/db:/data/db -d mongo:latest

89daef5129332b2d60aa0cc2394e170dc74e1b347af71729289a534e98d55c4f

使用mongo鏡像執行mongo 命令鏈接到剛啓動的容器,主機IP爲：192.168.22.151，這個必定要，否則外部鏈接不上

五、[root@localhost mongo]# docker run -it mongo:latest mongo --host 192.168.22.151
MongoDB shell version v4.0.1
connecting to: mongodb://192.168.22.151:27017/
MongoDB server version: 4.0.1
Welcome to the MongoDB shell.
For interactive help, type "help".
For more comprehensive documentation, see
http://docs.mongodb.org/
------------------------------------------------------------------------------------

一、運行容器，加權限

[root@localhost mongo]# docker run --name mongodb-server0 -p 27017:27017 -v $PWD/db:/data/db -d mongo:latest --auth
129bcad7e5f5bc37c4888ce31ed7a1438db2f58d82be8b515aec74b521114d49

--auth 是加權限，加權限就須要建立用戶

--name mongodb-server0 容器名稱

-v $PWD/db:/data/db 將主機中當前目錄下的db掛載到容器的/data/db，做爲mongo數據存儲目錄

二、[root@localhost mongo]# docker run -it mongo:latest mongo --host 192.168.22.151

三、進入容器，登陸amdin集合，mongodb-server0是容器名稱

[root@localhost mongo]# docker exec -it mongodb-server0 mongo admin
MongoDB shell version v4.0.1
connecting to: mongodb://127.0.0.1:27017/admin
MongoDB server version: 4.0.1

或：

[root@localhost db]# docker exec -it mongodb-server0 /bin/bash
root@89daef512933:/# mongo 192.168.22.151:27017/hr

MongoDB shell version v4.0.1
connecting to: mongodb://192.168.22.151:27017/hr
MongoDB server version: 4.0.1
Server has startup warnings:

*mongodb相關使用：

MongoDB用戶權限
內建的角色：

數據庫用戶角色：read、readWrite;
數據庫管理角色：dbAdmin、dbOwner、userAdmin；
集羣管理角色：clusterAdmin、clusterManager、clusterMonitor、hostManager；
備份恢復角色：backup、restore；
全部數據庫角色：readAnyDatabase、readWriteAnyDatabase、userAdminAnyDatabase、dbAdminAnyDatabase
超級用戶角色：root // 這裏還有幾個角色間接或直接提供了系統超級用戶的訪問（dbOwner 、userAdmin、userAdminAnyDatabase）
內部角色：__system

角色說明：
Read：容許用戶讀取指定數據庫
readWrite：容許用戶讀寫指定數據庫
dbAdmin：容許用戶在指定數據庫中執行管理函數，如索引建立、刪除，查看統計或訪問system.profile
userAdmin：容許用戶向system.users集合寫入，能夠找指定數據庫裏建立、刪除和管理用戶
clusterAdmin：只在admin數據庫中可用，賦予用戶全部分片和複製集相關函數的管理權限。
readAnyDatabase：只在admin數據庫中可用，賦予用戶全部數據庫的讀權限
readWriteAnyDatabase：只在admin數據庫中可用，賦予用戶全部數據庫的讀寫權限
userAdminAnyDatabase：只在admin數據庫中可用，賦予用戶全部數據庫的userAdmin權限
dbAdminAnyDatabase：只在admin數據庫中可用，賦予用戶全部數據庫的dbAdmin權限。
root：只在admin數據庫中可用。超級帳號，超級權限

[root@localhost mongo]# docker exec -it mongodb-server0 /bin/bash

root@129bcad7e5f5:/# mongo 192.168.22.151:27017/admin

建立admin用戶

> db.createUser({ user: 'admin', pwd: '1234', roles: [ { role: "userAdminAnyDatabase", db: "admin" }，{ role: "readWriteAnyDatabase", db: "admin" } ] });
Successfully added user: {
"user" : "admin",
"roles" : [
    {
        "role" : "userAdminAnyDatabase",
        "db" : "admin"
    }
]
}

> db.auth("admin","1234") //進入後要認證用戶

建立新集合：

> use hr //建立數據庫
> db.createUser({ user: 'test', pwd: 'test', roles: [ { role: "readWrite", db: "hr" },{ role: "dbAdmin", db: "hr" },{ role: "userAdmin", db: "hr" } ] });
> db.auth("test","test") //受權

> db //查看當前數據庫
> show dbs

> db.updateUser('test',{user:'test',pwd:'test',roles:[{ role: "readWrite", db: "test" },{ role: "dbAdmin", db: "test" },{ role: "userAdmin", db: "test"}]}) //更新用戶信息

> db.dropUser('test') //刪除用戶

> use admin
> db.system.users.find({user:'test'}) //查詢用戶

> use admin

> db.createUser({user:"admin",pwd:"1234",roles:[{role:"root",db:"admin"}]})
> db.auth("admin","1234")
> mongo -uadmin -p123456 //登錄

建立成功後，能夠以認證方式登陸：

root@129bcad7e5f5:/# mongo --port 27017 -u "test" -p "test" --authenticationDatabase "hr"

建立集合：

db.createCollection("ramuser",{capped:true,size:6142800,max:10000}) //建立集合方法一（表） db.ramrole.insertOne( { x: 1 } ) //建立集合方法二
{
"acknowledged" : true,
"insertedId" : ObjectId("5b8a275f7ad79b48cb46aaf0")
}

新增文檔：

db.ram_role.insert({_id: 2,role_code:"cn001", role_name: "admin",validation:1,remark:"test"})
db.ramrole.find() { "id" : ObjectId("5b8a275f7ad79b48cb46aaf0"), "x" : 1 }

show collections //顯示全部集合

db.roleEntity.insert({_id: "2",role_code:"cn002", role_name: "admin2",validation:1,remark:"test"});

db.roleEntity.find(); //查詢roleEntity集合的全部文檔

db.roleEntity.update({'roleCode':'cn002'},{$set:{'roleCode':'CN003'}})

//刪除roleEntity集合中文檔（記錄）

db.roleEntity.remove({ "_id" : ObjectId("5b8a7e3e399b861b281af574")})

db.roleEntity.remove({ "_id" : "2"})

db.roleEntity.find({validation : {$gte : 1}}) //條件查詢validation 等於1的記錄

2、Dockerfile安裝

[root@localhost ~]# mkdir -p ~/mongo ~/mongo/db
編輯Dockerfile，放入~/mongo目錄

FROM debian:jessie-slim

# add our user and group first to make sure their IDs get assigned consistently, regardless of whatever dependencies get added
RUN groupadd -r mongodb && useradd -r -g mongodb mongodb

RUN apt-get update \
    && apt-get install -y --no-install-recommends \
        ca-certificates \
        jq \
        numactl \
    && rm -rf /var/lib/apt/lists/*

# grab gosu for easy step-down from root (https://github.com/tianon/gosu/releases)
ENV GOSU_VERSION 1.10
# grab "js-yaml" for parsing mongod's YAML config files (https://github.com/nodeca/js-yaml/releases)
ENV JSYAML_VERSION 3.10.0

RUN set -ex; \
    \
    apt-get update; \
    apt-get install -y --no-install-recommends \
        wget \
    ; \
    rm -rf /var/lib/apt/lists/*; \
    \
    dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
    wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
    wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
    export GNUPGHOME="$(mktemp -d)"; \
    gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
    gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
    command -v gpgconf && gpgconf --kill all || :; \
    rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \
    chmod +x /usr/local/bin/gosu; \
    gosu nobody true; \
    \
    wget -O /js-yaml.js "https://github.com/nodeca/js-yaml/raw/${JSYAML_VERSION}/dist/js-yaml.js"; \
# TODO some sort of download verification here
    \
    apt-get purge -y --auto-remove wget

RUN mkdir /docker-entrypoint-initdb.d

ENV GPG_KEYS \
# pub   4096R/AAB2461C 2014-02-25 [expires: 2016-02-25]
#       Key fingerprint = DFFA 3DCF 326E 302C 4787  673A 01C4 E7FA AAB2 461C
# uid                  MongoDB 2.6 Release Signing Key <packaging@mongodb.com>
    DFFA3DCF326E302C4787673A01C4E7FAAAB2461C \
# pub   4096R/EA312927 2015-10-09 [expires: 2017-10-08]
#       Key fingerprint = 42F3 E95A 2C4F 0827 9C49  60AD D68F A50F EA31 2927
# uid                  MongoDB 3.2 Release Signing Key <packaging@mongodb.com>
    42F3E95A2C4F08279C4960ADD68FA50FEA312927
# https://docs.mongodb.com/manual/tutorial/verify-mongodb-packages/#download-then-import-the-key-file
RUN set -ex; \
    export GNUPGHOME="$(mktemp -d)"; \
    for key in $GPG_KEYS; do \
        gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key"; \
    done; \
    gpg --export $GPG_KEYS > /etc/apt/trusted.gpg.d/mongodb.gpg; \
    command -v gpgconf && gpgconf --kill all || :; \
    rm -r "$GNUPGHOME"; \
    apt-key list

# Allow build-time overrides (eg. to build image with MongoDB Enterprise version)
# Options for MONGO_PACKAGE: mongodb-org OR mongodb-enterprise
# Options for MONGO_REPO: repo.mongodb.org OR repo.mongodb.com
# Example: docker build --build-arg MONGO_PACKAGE=mongodb-enterprise --build-arg MONGO_REPO=repo.mongodb.com .
ARG MONGO_PACKAGE=mongodb-org
ARG MONGO_REPO=repo.mongodb.org
ENV MONGO_PACKAGE=${MONGO_PACKAGE} MONGO_REPO=${MONGO_REPO}

ENV MONGO_MAJOR 3.2
ENV MONGO_VERSION 3.2.20

RUN echo "deb http://$MONGO_REPO/apt/debian jessie/${MONGO_PACKAGE%-unstable}/$MONGO_MAJOR main" | tee "/etc/apt/sources.list.d/${MONGO_PACKAGE%-unstable}.list"

RUN set -x \
    && apt-get update \
    && apt-get install -y \
        ${MONGO_PACKAGE}=$MONGO_VERSION \
        ${MONGO_PACKAGE}-server=$MONGO_VERSION \
        ${MONGO_PACKAGE}-shell=$MONGO_VERSION \
        ${MONGO_PACKAGE}-mongos=$MONGO_VERSION \
        ${MONGO_PACKAGE}-tools=$MONGO_VERSION \
    && rm -rf /var/lib/apt/lists/* \
    && rm -rf /var/lib/mongodb \
    && mv /etc/mongod.conf /etc/mongod.conf.orig

RUN mkdir -p /data/db /data/configdb \
    && chown -R mongodb:mongodb /data/db /data/configdb
VOLUME /data/db /data/configdb

COPY docker-entrypoint.sh /usr/local/bin/
RUN ln -s usr/local/bin/docker-entrypoint.sh /entrypoint.sh # backwards compat
ENTRYPOINT ["docker-entrypoint.sh"]

EXPOSE 27017
CMD ["mongod"]

[root@localhost mongo]# docker build -t mongo:4.0 . //安裝過程出錯，要使用 PGP 簽名或者 SHA-256 校驗和來驗證軟件包

可參考：https://segmentfault.com/a/1190000007285023

https://docs.mongodb.com/manual/tutorial/verify-mongodb-packages/

Reading package lists...
W: GPG error: http://repo.mongodb.org jessie/mongodb-org/4.0 Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 68818C72E52529D4
+ apt-get install -y mongodb-org=4.0.1 mongodb-org-server=4.0.1 mongodb-org-shell=4.0.1 mongodb-org-mongos=4.0.1 mongodb-org-tools=4.0.1
Reading package lists...
Building dependency tree...
Reading state information...
The following extra packages will be installed:


0 upgraded, 26 newly installed, 0 to remove and 0 not upgraded.
Need to get 61.7 MB of archives.
After this operation, 253 MB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
  mongodb-org-shell mongodb-org-server mongodb-org-mongos mongodb-org-tools
  mongodb-org
The command '/bin/sh -c set -x     && apt-get update     && apt-get install -y         ${MONGO_PACKAGE}=$MONGO_VERSION         ${MONGO_PACKAGE}-server=$MONGO_VERSION         ${MONGO_PACKAGE}-shell=$MONGO_VERSION         ${MONGO_PACKAGE}-mongos=$MONGO_VERSION         ${MONGO_PACKAGE}-tools=$MONGO_VERSION     && rm -rf /var/lib/apt/lists/*     && rm -rf /var/lib/mongodb     && mv /etc/mongod.conf /etc/mongod.conf.orig' returned a non-zero code: 100

[root@localhost mongo]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
<none> <none> 6012cd999f9c 4 minutes ago 87.4 MB
debian jessie-slim bcdc1307bd3b 6 weeks ago 79.1 MB
centos latest 67591570dd29 20 months ago 192 MB
[root@localhost mongo]# docker tag 6012cd999f9c mongo:4.0 //可能沒有名稱，修改image名稱與tag
[root@localhost mongo]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
mongo 4.0 6012cd999f9c 7 minutes ago 87.4 MB

[root@localhost mongo]# docker run --name mongodb-server0 -itd mongo:4.0
430d2867e6175f0fc730c18d71fc9b0a3478b7a33cf1e065af315170b9457879
[root@localhost mongo]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
430d2867e617 mongo:4.0 "bash" 5 seconds ago Up 4 seconds mongodb-server0
[root@localhost mongo]# docker exec -it 430d2867e617 /bin/bash
進行安裝包簽名（過程太長，未執行）

[root@localhost mongo]# docker run --name mongodb-server0 -p 27017:27017 -v $PWD/db:/data/db -d mongo:4.0 aaf74150d3bb812ccf4e60a77f5bde6b7d63313619712d288ecfc977cef6a824 [root@localhost mongo]# docker run -it mongo:latest mongo --host 192.168.22.151